Product:

Discuzx

(Discuz)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 9
Date Id Summary Products Score Patch Annotated
2024-04-11 CVE-2024-30884 Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component. Discuzx N/A
2023-02-15 CVE-2022-45543 Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search. Discuzx 6.1
2018-01-12 CVE-2018-5376 Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter. Discuzx N/A
2018-01-12 CVE-2018-5377 Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter. Discuzx 9.8
2018-01-12 CVE-2018-5375 Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action. Discuzx 6.1
2018-01-10 CVE-2018-5331 Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php. Discuzx 5.4
2018-01-08 CVE-2018-5259 Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter. Discuzx 8.8
2018-04-22 CVE-2018-10298 Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content. Discuzx 5.4
2018-04-22 CVE-2018-10297 Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images. Discuzx 5.4